82051ddb11b9aab346aadac37ecde41d_JaffaCakes118

General

Target
82051ddb11b9aab346aadac37ecde41d_JaffaCakes118
Size 478KB
Sample240801-2naxhsvcne
SHA256 3b9e510576f00cdf3ded296813357e8b391b0ab029fed04d1840b8a087292834
MD5 82051ddb11b9aab346aadac37ecde41d
SHA1 6a32c44daa086fc1830783fafcc3a7c3fb4d58d3
SHA512 50f1c82812fdd3a483f51e67454294abd634e880fc540837d2af475c6473273ef57736d77650ee80a4937762fb3c8f31e644d0cdd94410ff3faa8d0455d083d3
SSDEEP 12288:VvUGNDMRh6cLVLQ3tw0D/v9p5jk1F6YFBzwmEyoARBbzZJ:eh6chYus9g3r7zwlyoc9j
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
82051ddb11b9aab346aadac37ecde41d_JaffaCakes118

SHA256 3b9e510576f00cdf3ded296813357e8b391b0ab029fed04d1840b8a087292834
MD5 82051ddb11b9aab346aadac37ecde41d
SHA1 6a32c44daa086fc1830783fafcc3a7c3fb4d58d3
SHA512 50f1c82812fdd3a483f51e67454294abd634e880fc540837d2af475c6473273ef57736d77650ee80a4937762fb3c8f31e644d0cdd94410ff3faa8d0455d083d3
SSDEEP 12288:VvUGNDMRh6cLVLQ3tw0D/v9p5jk1F6YFBzwmEyoARBbzZJ:eh6chYus9g3r7zwlyoc9j
MD5 SHA1 SHA512 SSDEEP

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

1517888

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths